RETIRED: Samsung Galaxy S Phones CVE-2015-2865 Man in The Middle Security Bypass Vulnerability

Bugtraq ID:	75229
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 17 2015 12:00AM
Updated:	Jul 15 2015 12:41AM
Credit:	Ted Eull of NowSecure
Vulnerable:
Not Vulnerable:

RETIRED: Samsung Galaxy S Phones CVE-2015-2865 Man in The Middle Security Bypass Vulnerability

Samsung Galaxy S Phones are prone to a security-bypass vulnerability.

Remote attackers can exploit this issue to modify or write arbitrary data to the affected device. Other attacks are also possible.

Note: This BID is being retired as CVE-2015-2865 (Samsung Galaxy S Phones CVE-2015-2865 Man in The Middle Security Bypass Vulnerability) is rejected and split into two issues. The following individual records exist to better document the issues:

75347 SwiftKey CVE-2015-4640 Man in The Middle Security Bypass Vulnerability
75353 SwiftKey CVE-2015-4641 Directory Traversal Vulnerability

RETIRED: Samsung Galaxy S Phones CVE-2015-2865 Man in The Middle Security Bypass Vulnerability

Attackers can use readily available network utilities.

RETIRED: Samsung Galaxy S Phones CVE-2015-2865 Man in The Middle Security Bypass Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: Samsung Galaxy S Phones CVE-2015-2865 Man in The Middle Security Bypass Vulnerability

References:

• Samsung Homepage (Samsung)